Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: baeVEWDW761SWwJOije0+dgdx5x4uA2ZJEhU91I1m3w=
Subject key identifier: A8:D4:31:BB:8F:99:00:24:5A:23:EE:0B:26:7B:B5:5F:78:D2:19:CA
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019D3A1C330B9BD4D924FFC65880BE7C689E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0B99
Signing time: Sun 29 Mar 2026 15:00:19 +0000
Manifest this update: Sun 29 Mar 2026 15:00:19 +0000
Manifest next update: Mon 30 Mar 2026 15:00:19 +0000
Files and hashes: 1: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: dT+NVZqOviHTG/bvtEtG06q2Gahr96hGmAU+0cb+5F4=)
2: doW0mpCnrwRns3RIOxChwkliLTE.roa (hash: GsqyaGjy8E4RJKoWLdZmSypIUlVFghPNcYphYfam9qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:33:0b:9b:d4:d9:24:ff:c6:58:80:be:7c:68:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Mar 29 15:00:19 2026 GMT
Not After : Mar 30 15:00:19 2026 GMT
Subject: CN=a8d431bb8f9900245a23ee0b267bb55f78d219ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:b9:82:0f:74:f3:61:d2:ec:e9:dc:e0:b0:
36:2f:47:02:82:af:83:44:c1:b5:45:be:c3:ff:a6:
5e:97:c5:ff:6c:34:4f:e3:b4:0e:c4:c1:dc:c4:7e:
03:9c:4a:e4:56:4c:56:17:8f:72:0d:09:15:57:87:
a9:f9:81:95:6d:95:4b:e4:a8:b1:de:e2:4c:8b:d9:
1c:e9:2c:0f:07:9c:c8:5b:91:5d:3a:77:cc:58:fc:
36:13:b1:16:25:f6:3e:d3:3c:14:c4:00:1b:a1:b2:
c0:89:e9:6b:53:6e:c5:06:bd:1c:92:12:b8:f1:68:
5b:4c:67:9b:aa:e0:81:b6:45:d8:af:bb:6d:ad:85:
99:e9:b7:b9:5e:50:02:09:39:cd:bd:b8:84:7d:11:
4c:fd:5a:54:6a:90:03:e4:0d:3d:b3:e9:a7:8d:26:
70:08:43:10:2f:5d:6f:e9:c0:c7:da:a8:4f:92:29:
09:22:1c:35:4b:90:79:87:27:dc:14:40:34:3c:50:
7a:9f:cb:78:18:a0:dd:02:79:41:81:a7:e4:1e:06:
4b:85:68:c1:f1:b5:c5:e0:f7:9c:86:11:fb:1a:1b:
d7:dd:53:13:83:66:26:a8:c7:fb:14:1e:29:aa:4f:
d6:7d:82:32:98:20:71:02:db:c8:d4:18:86:7d:6a:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:31:BB:8F:99:00:24:5A:23:EE:0B:26:7B:B5:5F:78:D2:19:CA
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a3:a3:f7:63:dd:f7:80:bf:37:b7:83:d7:b2:23:9f:4f:a2:
22:a9:42:e1:13:f7:22:0c:17:91:aa:28:20:80:e2:18:4a:53:
f1:14:d1:b3:86:8d:3a:12:fe:6f:3a:7e:48:81:6c:3f:87:69:
be:25:b2:c6:25:98:e0:7a:d6:9f:5a:7c:64:47:a7:8f:16:b5:
8c:17:a5:27:c2:26:02:a8:8c:b2:87:69:9a:9f:29:e6:a5:1e:
5e:5c:71:5c:41:19:7c:7c:98:55:26:e7:f9:85:76:90:24:fa:
fa:3f:5c:ca:15:c7:77:05:a5:86:7f:9f:29:43:43:9a:de:35:
b9:ee:ce:ee:a7:38:79:9b:e5:21:e3:a0:20:ad:bb:9c:d6:fc:
be:5c:40:e9:2c:3c:fb:5a:96:3a:35:89:e0:51:d8:d6:f7:e3:
bf:95:9e:0e:16:82:35:f8:f7:50:96:b6:3e:6a:2f:e1:7d:27:
7b:9c:f3:ca:ac:ab:b4:6e:ef:84:ff:3f:0c:de:52:af:21:fd:
7c:e4:6e:d5:b0:56:bc:33:79:86:ef:26:a9:c5:5a:b6:78:75:
d5:4a:a0:e3:20:68:20:bb:80:1f:12:92:96:df:70:db:17:9f:
d5:f1:32:56:b1:f1:91:03:35:e9:05:4c:d8:00:c5:d3:9c:64:
a2:82:be:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:52 2026 by rpki-client